veewee/reflecta
Repository tests, release notes, licensing, and automated analysis provide useful maintenance context. CI action pinning is weak, and the missing security policy leaves less guidance if problems arise.
68%
Total Score
25
100
75
Health Score Breakdown
The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance warning, particularly because it contrasts with the package's recent release cadence.
There were two new pull requests in the last month and no open issues, showing some current interaction. However, neither pull request was merged during that period, so this is only limited evidence of activity.
The repository has no security policy. That is a transparency and incident-handling gap, though it is not evidence of a security defect by itself.
All three workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 6 of 6 action references are unpinned, leaving CI exposed to changing action revisions.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Toon Verwerft |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 php-standard-library/vec Version ^6.1 | — | — |
php-standard-library/dict Version ^6.1 | — | — |
php-standard-library/iter Version ^6.1 | — | — |
php-standard-library/option Version ^6.1 | — | — |
php-standard-library/result Version ^6.1 | — | — |
Weekly Downloads
Info
- Last Published
- 4 months ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.